WO2015047386A1 - Interpreting signals received from redundant buses - Google Patents

Interpreting signals received from redundant buses Download PDF

Info

Publication number
WO2015047386A1
WO2015047386A1 PCT/US2013/062599 US2013062599W WO2015047386A1 WO 2015047386 A1 WO2015047386 A1 WO 2015047386A1 US 2013062599 W US2013062599 W US 2013062599W WO 2015047386 A1 WO2015047386 A1 WO 2015047386A1
Authority
WO
WIPO (PCT)
Prior art keywords
bus
signal
fault
signals
buses
Prior art date
Application number
PCT/US2013/062599
Other languages
French (fr)
Inventor
Alex Gunnar OLSON
Original Assignee
Hewlett-Packard Development Company, L.P.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hewlett-Packard Development Company, L.P. filed Critical Hewlett-Packard Development Company, L.P.
Priority to PCT/US2013/062599 priority Critical patent/WO2015047386A1/en
Priority to EP13894301.4A priority patent/EP3053039A1/en
Priority to US15/025,565 priority patent/US10055322B2/en
Priority to CN201380079938.0A priority patent/CN105593822A/en
Priority to TW103123966A priority patent/TW201516657A/en
Publication of WO2015047386A1 publication Critical patent/WO2015047386A1/en

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/30Monitoring
    • G06F11/3003Monitoring arrangements specially adapted to the computing system or computing system component being monitored
    • G06F11/3027Monitoring arrangements specially adapted to the computing system or computing system component being monitored where the computing system component is a bus
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/07Responding to the occurrence of a fault, e.g. fault tolerance
    • G06F11/16Error detection or correction of the data by redundancy in hardware
    • G06F11/1608Error detection by comparing the output signals of redundant hardware
    • G06F11/1625Error detection by comparing the output signals of redundant hardware in communications, e.g. transmission, interfaces
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00Error detection; Error correction; Monitoring
    • G06F11/22Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing
    • G06F11/2205Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested
    • G06F11/221Detection or location of defective computer hardware by testing during standby operation or during idle time, e.g. start-up testing using arrangements specific to the hardware being tested to test buses, lines or interfaces, e.g. stuck-at or open line faults

Definitions

  • peripheral devices such as sensors and actuators
  • a controller area network (CAN) bus typically has a pair of differential communication lines that are driven in synchronization with a clock signal to serially indicate data.
  • One of more peripherals at a given location may communicate with the CAN bus through the use of an associated CAN bus controller and transceiver.
  • the CAN controller regulates the CAN bus
  • the transceiver translates voltage levels between the CAN bus and the CAN bus controller.
  • Fig. 1 is a schematic diagram of a computer system that includes redundant controller area network (CAN) buses according to an example implementation.
  • CAN controller area network
  • Fig. 2 is a schematic diagram of a CAN bus controller and a CAN bus interface of a node of the computer system of Fig. 1 according to an example implementation.
  • FIGs. 3A, 3B, 4 and 7 are flow diagrams depicting techniques to interpret signals received from redundant buses according to example implementations.
  • Fig. 5 is a flow diagram depicting a technique to identify bus device(s) having impaired communications due to a recessive bus fault according to an example implementation.
  • FIG. 6 is a schematic diagram of a CAN bus controller and CAN bus interface according to a further example implementation.
  • a computer system 100 includes one or multiple nodes 104 (N example nodes 104-1 , 104-2, . . ., 104-N, being depicted in Fig. 1 as examples), which communicate with each other using a set of redundant buses 1 50 (two buses 150-1 and 150-2, being depicted in Fig. 1 as examples).
  • the bus 150 may become a single point of failure. For example, a single bent connector pin on a given bus device may cause an electrical short on the bus 150, which may disrupt communication among the nodes 104.
  • the redundant bus architecture provides a relatively more robust, fault tolerant form of communication by providing an alternative communication path should the communication on a given bus become impaired. It is noted that although two buses 150 are depicted in Fig. 1 , the computer system 100 may have three, four or more buses to form a set of redundant buses, in accordance with further example implementations.
  • the redundant buses 150 concurrently indicate the same data bit (i.e., a data bit formed from the logical value represented by data bit lines) if no faults are present. However, if a bus fault occurs, the data bits differ, i.e., one bus 150 may provide the current data signal, whereas the bus 150 with the fault does not. As described herein, a given node 104 interprets the signals received from the redundant buses 150 for purposes of deriving the correct bus data signal based on whether a certain bus fault (described below) has been detected.
  • the nodes 104 and the buses 150 form a controller area network (CAN). It is noted, however, that other networks and other redundant buses employing other bus communication protocols may be used, in accordance with further implementations.
  • the bus 150 employs serial communication in which a pair of data lines of the bus 150 differentially indicates, or represents, a serial stream of data bits. This stream is synchronized to a clock signal. The serial data represents message payload data, node identifiers, and so forth.
  • one of the nodes 104 is granted use of the buses 1 50, and as such, may transmit one or more messages via the buses 150 to a receiving node 104. Deciding which node 104 is granted the present right to transmit on the buses 150, also called "arbitration," may be achieved, according to example implementations, through the use of node identifications (IDs); and dominant and recessive bits.
  • IDs node identifications
  • a given node 104 may request use of the buses 150 by serially communicating its ID to the buses 150.
  • the ID of the node 104 may be a preamble sequence of zeros followed by another sequence of ones and zeros.
  • the nodes 1 04 concurrently serially furnish their IDs to the buses 150, and the arbitration scheme selects the node 104 whose ID bit is the last ID bit to be "dominant.”
  • a "dominant" bit is associated with a logic zero
  • a "recessive" bit is associated with logic one.
  • each node 104 in accordance with example
  • a bus interface 140 For purposes of transmitting bus data, a CAN bus controller 134 of the node 104 generates data, which the bus interface 140 redundantly drives onto the data lines of the buses 150-1 and 150-2. For purposes of receiving bus data, the bus interface 140 and the bus controller 134 cooperate to logically combine the data signals from the redundant buses 150-1 and 150-2 and select the logically combined data signals in a fault-tolerant manner.
  • the bus interface 140 logically combines the bus signals according to two different logic functions to provide two corresponding signals for selection by the bus controller 134: one of the signals correctly represents the bus data when 1 .) no fault occurs or 2.) a recessive bus fault (described below) occurs; and the other signal correctly represents the bus data when a dominant bus fault (described below) occurs.
  • the bus interface 140 logically ANDs the data signals from the buses 150-1 and 1502 together to provide a data signal, which accurately represents, or indicates, the bus data, for 1 . the case of no bus faults occurring; and for 2. the case of a recessive bus fault (described below) occurring in one of the buses 150-1 and 150-2.
  • a recessive bus fault with a given bus 150 occurs when the differential data line pair of the bus 150 always indicates a recessive bit (a logic one), regardless of the data being driven onto the bus 150 by the transmitting node 104.
  • the data signal from the bus 150 indicates, or represents, a successive stream of logic ones.
  • a recessive fault may be caused by an open circuit or a short between two lines of the bus 150 to cause the differential data line pair of the bus 150 to continuously indicate a recessive (logic one) bit.
  • a data signal formed by logically ANDing the received data signals from the buses 150 together accurately indicates, or represents, the correct, or intended, bus data, when no faults are present and also accurately indicates the correct data if one of the buses 150 experiences a recessive fault. For example, if the intended data bit is a logic zero and if no recessive fault occurs, the ANDing operation of logic zero bits from both buses 150 correctly produces a logic zero bit. If a recessive fault occurs with one of the buses 150, the bus experiencing the fault 150 continuously indicates a logic one bit. However, the ANDing of the logic one bit (from the bus 1 50 with the recessive fault) and the logic zero bit (from the bus 150 not having a fault) also produces the correct logic zero bit.
  • the ANDing operation of logic one bits from both buses 150 correctly produces a logic one bit. If a recessive fault occurs with one of the buses 150, the ANDing of the logic one bit (from the bus 1 50 with the recessive fault) and the logic one bit (from the bus 150 not having a fault) also produces the correct logic one bit.
  • a dominant bus fault with a given bus 150 occurs when the differential data line pair of the bus 150 indicates a dominant bit (a logic zero bit), regardless of the data being driven onto the bus 150 by the transmitting node 104.
  • a given bus 150 experiences a dominant fault, a successive stream of logic zeros are received as the data from the bus 150.
  • a dominant fault may occur on a given bus 150 when, for example, a line of the bus 150 contacts a power rail.
  • the logical ANDing does not accommodate the dominant fault because the logical ANDing of the data signals from the buses 150-1 and 150-2 produces a constant stream of logic zeros due to a "zero" being an input to the ANDing.
  • the bus interface 140 in additional to logically ANDing the data signals from the buses 150, the bus interface 140 also logically ORs the data signals together to produce an alternate bus data signal for the controller 134.
  • This alternate data signal accurately indicates, or represents, the intended bus data, in the event of a dominant fault.
  • the bus experiencing the fault 150 continuously indicates a logic zero bit, regardless of the data being driven onto the bus 150 by the transmitting node 1 04.
  • the ORing of the logic zero bit (from the bus 1 50 with the dominant fault) and the logic zero bit (from the bus 150 not having a fault) produces the correct logic zero bit.
  • the ORing of the logic zero bit (from the bus 150 with the dominant fault) and the logic one bit (from the bus 150 not having a fault) produces the correct logic one bit.
  • the bus interface 140 produces two potential bus data input signals for selection by the bus controller 134: a first signal generated by the interface 140 logically ANDing the data signals received from the buses 150 together; and a second signal produced by the interface 140 logically ORing the data signals together.
  • the bus controller 134 interprets the data signals that are provided by the bus interface 140 (and thus, selects the appropriate signal as its bus data input signal) based at least in part on whether or not a dominant fault has been detected.
  • the bus controller 134 selects the bus data input signal derived from the logical ANDing of the bus data signals. It is noted that this selected signal is not prone to recessive faults and as such, accurately indicates the intended bus data for the case of no faults and also for the case of a recessive fault.
  • the controller 1 34 selects the alternate bus data input signal derived from the logical ORing of the bus data signals together. As described above, this logically ORed signal accurately indicates the intended bus data in the presence of a dominant fault.
  • a technique 300 includes receiving (block 302) a first signal from a first bus and receiving (block 304) a second signal from a second bus. Pursuant to the technique 300, the first and second signals are combined (block 306) to generate a combined signal; and the first and second signals are interpreted (block 310) to derive a bus data input signal for a bus controller, where the interpretation includes selecting the combined signal as the bus data input signal based at least in part on whether a predetermined bus fault has been detected. [0022] More specifically, referring to Fig. 3B in conjunction with Fig.
  • a technique 350 includes receiving (block 352) a first signal from a first bus and receiving (block 354) a second signal from a second, redundant bus. Pursuant to the technique 350, the first and second signals are combined (block 356) according to a first rule to provide a third signal and combined (block 358) according to a second rule to provide a fourth signal. The technique 350 includes selectively interpreting the third and fourth signals based at least in part on the detection of a predetermined bus fault, including selecting one of the third and fourth signals as a bus data input signal for a controller, pursuant to block 360.
  • the node 104 (such as example node 104-1 , which is depicted in more detail in Fig. 1 ) is a physical machine that includes hardware 1 1 2 and machine executable instructions 130, or "software.”
  • the hardware 1 12 may include, as an example a processor 1 1 0.
  • the processor 1 10 may include one or multiple central processing unit (CPU)-based processing cores 1 14, counters 1 16, timers 1 18, one or more analog-to-digital converters (ADCs) 120, and so forth.
  • the processor 1 1 0 may be a microcontroller, although the processor 1 10 may assume other forms, in accordance with further implementations.
  • the processing core(s) 1 14 may execute a specific set of machine executable instructions (e.g., "software” or "firmware") to form the bus controller 134.
  • the bus controller 134 controls the packaging of data into messages to be communicated using the buses 150; the reception of messages from the buses 150; the queuing of the received messages for processing by a host 132 (described below); the signaling protocols for bus communications; the selection of the appropriate ORed or ANDed input signal from the bus interface 140; and so forth.
  • the processing core(s) 1 14 may execute another set of machine executable instructions to form the host 1 32.
  • the host 132 may perform a variety of different processing functions for the node 104, such as message processing for messages received from and transmitted to the buses 1 50; controlling operations and receiving data from various peripheral devices 146 (sensors, actuators, and so forth) of the node 104; and so forth.
  • message processing for messages received from and transmitted to the buses 1 50
  • peripheral devices 146 sensors, actuators, and so forth
  • Fig. 1 depicts the host 132 and bus controller 134 as being formed from a sole processor 1 10 (a microcontroller, for example), the host 132 and bus controller 134 may be formed form separate processing entities, in accordance with further example implementations.
  • the processor 1 1 0 and bus interface 140 may have an exemplary architecture 200.
  • the bus controller 134 includes a dominant fault handler 206, which is constructed to detect when a dominant fault occurs with one of the buses 150 so that the bus controller 134 may select the appropriate bus data input signal for the bus controller 134.
  • the dominant fault handler 206 may be formed by the execution of a set of machine executable instructions by CPU processing core(s) 1 14 of the processor 1 10, in accordance with example implementations.
  • the dominant fault handler 206 may be triggered in response to a periodic software timer interrupt to determine if no bus packets have been sent or received for a given interval of time.
  • the standard for the buses 150 in accordance with some implementations, may impose a certain minimum bus activity level. Should a dominant fault occur, the data that is received due to the logical ANDing of signals results in a constant stream of logic zeros and as such, results in no packets being received.
  • the dominant fault handler 206 signals a dominant fault, which causes the bus controller 134 to switch from receiving logically ANDed data signals from the buses 150-1 and 150-2 (the default selection, for example) to receiving logically ORed data signals from the buses 150-1 and 150-2.
  • the processor 1 10 has a communication output 260 (a general purpose input/output (GPIO) pin, for example) that is driven by the bus controller 134 with the data to be communicated to the buses 150; a primary, or main, receive input 262 (a GPIO pin, for example), which receives a signal produced by the logical ANDing of the data signals from the buses 150; and an alternate data input 264 (a GPIO pin, for example), which receives a signal produced by the logical ORing of the data signals from the buses 150-1 and 150-2.
  • GPIO general purpose input/output
  • the dominant fault handler 206 configures the bus controller 134 to receive the data via the primary input 262 if no dominant fault is detected. If, however, the dominant fault handler 206 detects a dominant fault, the handler 206 configures the bus controller 134 to alternatively receive its data from the buses 150-1 and 150-2 using the alternate receive input 264.
  • the bus interface 140 includes bus transceivers 220 (two bus transceivers 220-1 and 220-2, being depicted as examples in Fig. 2), which are coupled to the buses 150-1 and 150-2, respectively.
  • the bus transceiver 220 differentially detects data from its bus 150 and provides a corresponding signal on its output 232 indicative of the received data.
  • the transceiver 220 also differentially drives a particular logic level onto its associated bus 150 in response to a logic signal being driven by the processor 1 1 0 onto the transmit input 230 of the transceiver 220.
  • the bus transceiver 220 has associated high 224 and low 226 lines coupled to the differential data lines of its associated bus 1 50.
  • the transceiver 220 provides the appropriate voltage translations between the bus 150 and inputs/outputs of the processor 1 10. [0031 ] Thus, the receive outputs 232 of the bus transceivers 220 provide signals that represent the data sensed from the associated buses 150.
  • the bus interface 140 includes an AND gate 280, which has inputs that are coupled to the receive outputs 232 of the transceivers 220.
  • An output terminal of the AND gate 280 is coupled to the primary bus data input 262 of the processor 1 10 and provides a signal to the processor input 262, which indicates, or represents, the logical ANDing of the data signals that are received from the buses 150-1 and 150-2.
  • the bus interface 140 further includes an OR gate 270, which has inputs that are coupled to the receive outputs 232 of the transceivers 220. An output terminal of the OR gate 270 is coupled to the alternate data input 264 of the processor 1 10. Therefore, the OR gate 270 provides a signal that represents, or indicates, the logical ORing of the data signals that are received from the buses 150.
  • the bus controller 134 and dominant fault handler 206 interact according to a technique 400.
  • a determination is made (decision block 402) whether a dominant fault is present. If not, the signals from the redundant buses are logically ANDed (block 404) and the resulting signal is selected as the bus data input signal for the bus controller 1 34. If, however, a dominant fault is detected (decision block 402), the technique 400 includes logically ORing the signals from the redundant buses together and selecting the resulting signal as the bus data input signal for the bus controller, pursuant to block 406.
  • the bus controller 134 may enter a diagnostic mode, in which a recessive fault handler 204 of the bus controller 134 detects for the presence of a recessive fault.
  • the recessive fault handler 204 may be formed by the execution of a set of machine executable instructions by CPU processing core(s) 1 14 of the processor 1 10, in accordance with example implementations.
  • the recessive fault handler 204 detects recessive faults by listening for heartbeat messages in the diagnostic mode.
  • each node 104 may periodically transmit a "heartbeat" message, which uniquely identifies the node 104 as existing on the buses 150.
  • the recessive fault handler 204 uses this diagnostic node to compare the set of bus devices identified using the signal received at the input 264 (the ORed signal) to the set of bus devices identified using the signal received at the input 262 (the ANDed signal).
  • a "bus device” may be a node 104, a peripheral, a port 146 or any other software or hardware entity that communicates via the bus 1 50.
  • the frequency of the heartbeat messages may be accelerated for purposes of reducing the time for bus fault detection.
  • the nodes 104 may employ the above- described recessive bus fault detection for purposes of building a connectivity map between every possible combination of devices. This map may, in accordance with example implementations, allow the localization of a given recessive bus fault.
  • a technique 500 includes communicating (block 502) with bus devices using logical ANDing of signals that are received from redundant buses and attempting (block 504) to communicate with the bus devices using logical ORing of signals received from the redundant buses.
  • a recessive bus fault is detected based on the communication results.
  • intermittent faults may be mitigated using a bus interface 600 (replacing the bus interface 140, for example) that is depicted in Fig. 6.
  • "intermittent faults" refer to faults that alternate between dominant and recessive states. As an example, a case for intermittent faults may occur for a completely
  • the bus interface 600 allows three possible modes of reception.
  • an AND gate 614 of the bus interface 600 provides a bus data input signal to the receive input 262 of the processor 1 10, which is an ANDed version of the signals provided by the receive outputs 232 of the bus transceivers 220-1 and 220-2.
  • This mode of reception is for the case in which no faults are present or one of the buses 1 50 experiences a recessive fault. If, however, a dominant fault is detected, then a second or a third mode of reception is used. With the second mode of reception, for this example, the receive output 232 from the bus transceiver 220-1 is used. In the third mode, the receive output 232 from the bus transceiver 220-2 is used.
  • the bus interface 600 includes OR gates 616 and 61 8 for purposes of solely selecting the receive output 232 from a given bus transceiver 220 for the receive input 262 to the processor 1 10.
  • the OR gate 61 6 includes one input that is coupled to the receive output 232 of the bus transceiver 220-2; and likewise, one input of the OR gate 618 is coupled to the receive output 232 of the transceiver 220-1 .
  • Another input of the OR gate 616 is coupled to a bus enable output 610 of the processor 1 1 0; and likewise, another input of the OR gate 618 is coupled to a bus enable output 612 of the processor 1 1 0.
  • the output terminals of the OR gates 616 and 618 are provided as inputs to the AND gate 614.
  • the processor 1 1 0 selectively de-asserts (drives to a logic zero, for example) the bus enable output 610 and 61 2 for purposes of selecting one of the receive outputs 232. For example, when the processor 1 10 de-asserts the output 61 0, this selects the receive output 232 of the bus transceiver 220-1 .
  • the processor 1 10 When the processor 1 10 de-asserts the output 612, this selects the receive output 232 of the bus transceiver 220-2. [0039]
  • the processor 1 10 performs a technique 700 that is depicted in Fig. 7 for purposes of handling intermittent faults, in accordance with example implementations.
  • a first signal is received from the first bus, pursuant to block 704; and a second signal is received from a second bus, pursuant to block 706. If a determination is made (decision block 708) that a fault is detected with the first or second bus, then the signal from the bus not designated as experiencing the fault is received and used, pursuant to block 710.
  • the technique 700 includes logically ANDing the first and second signals from the first and second buses together to derive an input bus data signal for the controller, pursuant to block 714.
  • recessive and dominant fault tolerance may be incorporated into a system at a relatively low cost; a standard transceiver may be used; recessive and dominant fault tolerance may be provided using a single power domain supply; relatively few microcontroller pins (three, for example) may be used to implement the recessive and dominant fault tolerance; and so forth.
  • a standard transceiver may be used; recessive and dominant fault tolerance may be provided using a single power domain supply; relatively few microcontroller pins (three, for example) may be used to implement the recessive and dominant fault tolerance; and so forth.
  • microcontroller pins three, for example

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Quality & Reliability (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Mathematical Physics (AREA)
  • Computer Hardware Design (AREA)
  • Debugging And Monitoring (AREA)
  • Hardware Redundancy (AREA)
  • Small-Scale Networks (AREA)

Abstract

A technique includes receiving a first signal from a first bus, and receiving a second signal from a second bus. The first and second buses are used for redundant communications. The technique includes interpreting the first and second signals to derive a bus data input signal for a controller based at least in part on detection of a predetermined bus fault.

Description

INTERPRETING SIGNALS RECEIVED FROM REDUNDANT BUSES
BACKGROUND
In an automobile-based control system or industrial automation system, peripheral devices, such as sensors and actuators, may communicate using a controller area network (CAN) bus. The CAN bus typically has a pair of differential communication lines that are driven in synchronization with a clock signal to serially indicate data. One of more peripherals at a given location may communicate with the CAN bus through the use of an associated CAN bus controller and transceiver. The CAN controller regulates the
format/protocol of the CAN bus messaging, and the transceiver translates voltage levels between the CAN bus and the CAN bus controller.
BRIEF DESCRIPTION OF THE DRAWINGS
[0001 ] Fig. 1 is a schematic diagram of a computer system that includes redundant controller area network (CAN) buses according to an example implementation.
[0002] Fig. 2 is a schematic diagram of a CAN bus controller and a CAN bus interface of a node of the computer system of Fig. 1 according to an example implementation.
[0003] Figs. 3A, 3B, 4 and 7 are flow diagrams depicting techniques to interpret signals received from redundant buses according to example implementations.
[0004] Fig. 5 is a flow diagram depicting a technique to identify bus device(s) having impaired communications due to a recessive bus fault according to an example implementation.
[0005] Fig. 6 is a schematic diagram of a CAN bus controller and CAN bus interface according to a further example implementation.
DETAILED DESCRIPTION
[0007] Referring to Fig. 1 , in accordance with example implementations, a computer system 100 includes one or multiple nodes 104 (N example nodes 104-1 , 104-2, . . ., 104-N, being depicted in Fig. 1 as examples), which communicate with each other using a set of redundant buses 1 50 (two buses 150-1 and 150-2, being depicted in Fig. 1 as examples). In this regard, due to the shared nature of communication over a given bus 150, the bus 150 may become a single point of failure. For example, a single bent connector pin on a given bus device may cause an electrical short on the bus 150, which may disrupt communication among the nodes 104.
[0008] The redundant bus architecture provides a relatively more robust, fault tolerant form of communication by providing an alternative communication path should the communication on a given bus become impaired. It is noted that although two buses 150 are depicted in Fig. 1 , the computer system 100 may have three, four or more buses to form a set of redundant buses, in accordance with further example implementations.
[0009] The redundant buses 150 concurrently indicate the same data bit (i.e., a data bit formed from the logical value represented by data bit lines) if no faults are present. However, if a bus fault occurs, the data bits differ, i.e., one bus 150 may provide the current data signal, whereas the bus 150 with the fault does not. As described herein, a given node 104 interprets the signals received from the redundant buses 150 for purposes of deriving the correct bus data signal based on whether a certain bus fault (described below) has been detected.
[0010] As a more specific example, in accordance with example
implementations discussed herein, the nodes 104 and the buses 150 form a controller area network (CAN). It is noted, however, that other networks and other redundant buses employing other bus communication protocols may be used, in accordance with further implementations. [001 1 ] In accordance with example implementations, the bus 150 employs serial communication in which a pair of data lines of the bus 150 differentially indicates, or represents, a serial stream of data bits. This stream is synchronized to a clock signal. The serial data represents message payload data, node identifiers, and so forth. At a given time, one of the nodes 104 is granted use of the buses 1 50, and as such, may transmit one or more messages via the buses 150 to a receiving node 104. Deciding which node 104 is granted the present right to transmit on the buses 150, also called "arbitration," may be achieved, according to example implementations, through the use of node identifications (IDs); and dominant and recessive bits.
[0012] As an example, a given node 104 may request use of the buses 150 by serially communicating its ID to the buses 150. In this manner, the ID of the node 104 may be a preamble sequence of zeros followed by another sequence of ones and zeros. When multiple nodes 104 concurrently request the buses 1 04, the nodes 1 04 concurrently serially furnish their IDs to the buses 150, and the arbitration scheme selects the node 104 whose ID bit is the last ID bit to be "dominant." In this regard, in accordance with example implementations, a "dominant" bit is associated with a logic zero, and a "recessive" bit is associated with logic one. Initially during the serial ID transmission, all of the nodes 1 04 transmit dominant bits due to the above- described ID preamble of zeros; but eventually, one of the nodes 104 (the arbitration winner) transmits a dominant bit, while the remaining nodes 1 04 vying for the buses 150 transmit recessive bits.
[0013] In general, each node 104, in accordance with example
implementations, includes a bus interface 140. For purposes of transmitting bus data, a CAN bus controller 134 of the node 104 generates data, which the bus interface 140 redundantly drives onto the data lines of the buses 150-1 and 150-2. For purposes of receiving bus data, the bus interface 140 and the bus controller 134 cooperate to logically combine the data signals from the redundant buses 150-1 and 150-2 and select the logically combined data signals in a fault-tolerant manner. More particularly, as described in more detail below, in accordance with example implementations, the bus interface 140 logically combines the bus signals according to two different logic functions to provide two corresponding signals for selection by the bus controller 134: one of the signals correctly represents the bus data when 1 .) no fault occurs or 2.) a recessive bus fault (described below) occurs; and the other signal correctly represents the bus data when a dominant bus fault (described below) occurs.
[0014] More specifically, in accordance with example implementations, the bus interface 140 logically ANDs the data signals from the buses 150-1 and 1502 together to provide a data signal, which accurately represents, or indicates, the bus data, for 1 . the case of no bus faults occurring; and for 2. the case of a recessive bus fault (described below) occurring in one of the buses 150-1 and 150-2.
[0015] A recessive bus fault with a given bus 150 occurs when the differential data line pair of the bus 150 always indicates a recessive bit (a logic one), regardless of the data being driven onto the bus 150 by the transmitting node 104. Thus, when a given bus 150 experiences a recessive fault, the data signal from the bus 150 indicates, or represents, a successive stream of logic ones. As examples, a recessive fault may be caused by an open circuit or a short between two lines of the bus 150 to cause the differential data line pair of the bus 150 to continuously indicate a recessive (logic one) bit.
[0016] A data signal formed by logically ANDing the received data signals from the buses 150 together accurately indicates, or represents, the correct, or intended, bus data, when no faults are present and also accurately indicates the correct data if one of the buses 150 experiences a recessive fault. For example, if the intended data bit is a logic zero and if no recessive fault occurs, the ANDing operation of logic zero bits from both buses 150 correctly produces a logic zero bit. If a recessive fault occurs with one of the buses 150, the bus experiencing the fault 150 continuously indicates a logic one bit. However, the ANDing of the logic one bit (from the bus 1 50 with the recessive fault) and the logic zero bit (from the bus 150 not having a fault) also produces the correct logic zero bit. If the intended data bit is a logic one, if no recessive fault occurs, the ANDing operation of logic one bits from both buses 150 correctly produces a logic one bit. If a recessive fault occurs with one of the buses 150, the ANDing of the logic one bit (from the bus 1 50 with the recessive fault) and the logic one bit (from the bus 150 not having a fault) also produces the correct logic one bit.
[0017] The above-described logical ANDing, however, fails to accommodate dominant fault on one of the buses 150. A dominant bus fault with a given bus 150 occurs when the differential data line pair of the bus 150 indicates a dominant bit (a logic zero bit), regardless of the data being driven onto the bus 150 by the transmitting node 104. Thus, when a given bus 150 experiences a dominant fault, a successive stream of logic zeros are received as the data from the bus 150. A dominant fault may occur on a given bus 150 when, for example, a line of the bus 150 contacts a power rail. The logical ANDing does not accommodate the dominant fault because the logical ANDing of the data signals from the buses 150-1 and 150-2 produces a constant stream of logic zeros due to a "zero" being an input to the ANDing.
[0018] In accordance with example implementations that are disclosed herein, in additional to logically ANDing the data signals from the buses 150, the bus interface 140 also logically ORs the data signals together to produce an alternate bus data signal for the controller 134. This alternate data signal accurately indicates, or represents, the intended bus data, in the event of a dominant fault. In this manner, if the intended data bit is a logic zero and a dominant fault occurs with one of the buses 150, the bus experiencing the fault 150 continuously indicates a logic zero bit, regardless of the data being driven onto the bus 150 by the transmitting node 1 04. However, the ORing of the logic zero bit (from the bus 1 50 with the dominant fault) and the logic zero bit (from the bus 150 not having a fault) produces the correct logic zero bit. If the intended data bit is a logic one and a dominant fault occurs with one of the buses 150, the ORing of the logic zero bit (from the bus 150 with the dominant fault) and the logic one bit (from the bus 150 not having a fault) produces the correct logic one bit.
[0019] Thus, in accordance with example implementations, the bus interface 140 produces two potential bus data input signals for selection by the bus controller 134: a first signal generated by the interface 140 logically ANDing the data signals received from the buses 150 together; and a second signal produced by the interface 140 logically ORing the data signals together. The bus controller 134 interprets the data signals that are provided by the bus interface 140 (and thus, selects the appropriate signal as its bus data input signal) based at least in part on whether or not a dominant fault has been detected.
[0020] In this regard, if no dominant fault is detected, the bus controller 134 selects the bus data input signal derived from the logical ANDing of the bus data signals. It is noted that this selected signal is not prone to recessive faults and as such, accurately indicates the intended bus data for the case of no faults and also for the case of a recessive fault. When, however, a dominant fault is detected, the controller 1 34 selects the alternate bus data input signal derived from the logical ORing of the bus data signals together. As described above, this logically ORed signal accurately indicates the intended bus data in the presence of a dominant fault.
[0021 ] Referring to Fig. 3A in conjunction with Fig. 1 , thus, in accordance with example implementations, a technique 300 includes receiving (block 302) a first signal from a first bus and receiving (block 304) a second signal from a second bus. Pursuant to the technique 300, the first and second signals are combined (block 306) to generate a combined signal; and the first and second signals are interpreted (block 310) to derive a bus data input signal for a bus controller, where the interpretation includes selecting the combined signal as the bus data input signal based at least in part on whether a predetermined bus fault has been detected. [0022] More specifically, referring to Fig. 3B in conjunction with Fig. 1 , in accordance with example implementations, a technique 350 includes receiving (block 352) a first signal from a first bus and receiving (block 354) a second signal from a second, redundant bus. Pursuant to the technique 350, the first and second signals are combined (block 356) according to a first rule to provide a third signal and combined (block 358) according to a second rule to provide a fourth signal. The technique 350 includes selectively interpreting the third and fourth signals based at least in part on the detection of a predetermined bus fault, including selecting one of the third and fourth signals as a bus data input signal for a controller, pursuant to block 360.
[0023] In accordance with example implementations, the node 104 (such as example node 104-1 , which is depicted in more detail in Fig. 1 ) is a physical machine that includes hardware 1 1 2 and machine executable instructions 130, or "software." The hardware 1 12 may include, as an example a processor 1 1 0. As a more specific example, the processor 1 10 may include one or multiple central processing unit (CPU)-based processing cores 1 14, counters 1 16, timers 1 18, one or more analog-to-digital converters (ADCs) 120, and so forth. In accordance with example implementations, the processor 1 1 0 may be a microcontroller, although the processor 1 10 may assume other forms, in accordance with further implementations.
[0024] As depicted in Fig. 1 , in accordance with example implementations, the processing core(s) 1 14 may execute a specific set of machine executable instructions (e.g., "software" or "firmware") to form the bus controller 134. In general, the bus controller 134 controls the packaging of data into messages to be communicated using the buses 150; the reception of messages from the buses 150; the queuing of the received messages for processing by a host 132 (described below); the signaling protocols for bus communications; the selection of the appropriate ORed or ANDed input signal from the bus interface 140; and so forth. [0025] As also depicted in Fig. 1 , the processing core(s) 1 14 may execute another set of machine executable instructions to form the host 1 32. In general, the host 132 may perform a variety of different processing functions for the node 104, such as message processing for messages received from and transmitted to the buses 1 50; controlling operations and receiving data from various peripheral devices 146 (sensors, actuators, and so forth) of the node 104; and so forth.
[0026] Although Fig. 1 depicts the host 132 and bus controller 134 as being formed from a sole processor 1 10 (a microcontroller, for example), the host 132 and bus controller 134 may be formed form separate processing entities, in accordance with further example implementations.
[0027] Referring to Fig. 2, in accordance with example implementations, the processor 1 1 0 and bus interface 140 may have an exemplary architecture 200. In general, the bus controller 134 includes a dominant fault handler 206, which is constructed to detect when a dominant fault occurs with one of the buses 150 so that the bus controller 134 may select the appropriate bus data input signal for the bus controller 134. The dominant fault handler 206 may be formed by the execution of a set of machine executable instructions by CPU processing core(s) 1 14 of the processor 1 10, in accordance with example implementations.
[0028] More specifically, in accordance with example implementations, the dominant fault handler 206 may be triggered in response to a periodic software timer interrupt to determine if no bus packets have been sent or received for a given interval of time. The standard for the buses 150, in accordance with some implementations, may impose a certain minimum bus activity level. Should a dominant fault occur, the data that is received due to the logical ANDing of signals results in a constant stream of logic zeros and as such, results in no packets being received. Therefore, upon detecting that no packets have been received in a given time interval, the dominant fault handler 206 signals a dominant fault, which causes the bus controller 134 to switch from receiving logically ANDed data signals from the buses 150-1 and 150-2 (the default selection, for example) to receiving logically ORed data signals from the buses 150-1 and 150-2.
[0029] More specifically, as depicted in Fig. 2, in accordance with example implementations, the processor 1 10 has a communication output 260 (a general purpose input/output (GPIO) pin, for example) that is driven by the bus controller 134 with the data to be communicated to the buses 150; a primary, or main, receive input 262 (a GPIO pin, for example), which receives a signal produced by the logical ANDing of the data signals from the buses 150; and an alternate data input 264 (a GPIO pin, for example), which receives a signal produced by the logical ORing of the data signals from the buses 150-1 and 150-2. For purposes of receiving bus data, the dominant fault handler 206 configures the bus controller 134 to receive the data via the primary input 262 if no dominant fault is detected. If, however, the dominant fault handler 206 detects a dominant fault, the handler 206 configures the bus controller 134 to alternatively receive its data from the buses 150-1 and 150-2 using the alternate receive input 264.
[0030] In accordance with example implementations, the bus interface 140 includes bus transceivers 220 (two bus transceivers 220-1 and 220-2, being depicted as examples in Fig. 2), which are coupled to the buses 150-1 and 150-2, respectively. For data reception, the bus transceiver 220, in general, differentially detects data from its bus 150 and provides a corresponding signal on its output 232 indicative of the received data. For data transmission, the transceiver 220 also differentially drives a particular logic level onto its associated bus 150 in response to a logic signal being driven by the processor 1 1 0 onto the transmit input 230 of the transceiver 220. As depicted in Fig. 2, the bus transceiver 220 has associated high 224 and low 226 lines coupled to the differential data lines of its associated bus 1 50. The
transceiver 220 provides the appropriate voltage translations between the bus 150 and inputs/outputs of the processor 1 10. [0031 ] Thus, the receive outputs 232 of the bus transceivers 220 provide signals that represent the data sensed from the associated buses 150. The bus interface 140 includes an AND gate 280, which has inputs that are coupled to the receive outputs 232 of the transceivers 220. An output terminal of the AND gate 280 is coupled to the primary bus data input 262 of the processor 1 10 and provides a signal to the processor input 262, which indicates, or represents, the logical ANDing of the data signals that are received from the buses 150-1 and 150-2. The bus interface 140 further includes an OR gate 270, which has inputs that are coupled to the receive outputs 232 of the transceivers 220. An output terminal of the OR gate 270 is coupled to the alternate data input 264 of the processor 1 10. Therefore, the OR gate 270 provides a signal that represents, or indicates, the logical ORing of the data signals that are received from the buses 150.
[0032] Referring to Fig. 4 in conjunction with Fig. 2, in accordance with example implementations, the bus controller 134 and dominant fault handler 206 interact according to a technique 400. Pursuant to the technique 400, a determination is made (decision block 402) whether a dominant fault is present. If not, the signals from the redundant buses are logically ANDed (block 404) and the resulting signal is selected as the bus data input signal for the bus controller 1 34. If, however, a dominant fault is detected (decision block 402), the technique 400 includes logically ORing the signals from the redundant buses together and selecting the resulting signal as the bus data input signal for the bus controller, pursuant to block 406.
[0033] Referring to Fig. 2 in conjunction with Fig. 1 , in accordance with example implementations, the bus controller 134 may enter a diagnostic mode, in which a recessive fault handler 204 of the bus controller 134 detects for the presence of a recessive fault. The recessive fault handler 204 may be formed by the execution of a set of machine executable instructions by CPU processing core(s) 1 14 of the processor 1 10, in accordance with example implementations. [0034] More specifically, in accordance with example implementations, the recessive fault handler 204 detects recessive faults by listening for heartbeat messages in the diagnostic mode. In this manner, each node 104 may periodically transmit a "heartbeat" message, which uniquely identifies the node 104 as existing on the buses 150. For purposes of detecting a recessive fault and further determining which bus devices, if any, are affected by a recessive bus fault, the recessive fault handler 204 uses this diagnostic node to compare the set of bus devices identified using the signal received at the input 264 (the ORed signal) to the set of bus devices identified using the signal received at the input 262 (the ANDed signal). In this manner, if the recessive fault handler 204 "sees" a given bus device's heartbeat message using the input 264 but does not see "see" the device's heartbeat message using the alternate input 264, then the handler 204 flags the device as being impacted by a recessive bus fault. In this context, a "bus device" may be a node 104, a peripheral, a port 146 or any other software or hardware entity that communicates via the bus 1 50.
[0035] In accordance with example implementations, the frequency of the heartbeat messages may be accelerated for purposes of reducing the time for bus fault detection. It is noted that the nodes 104 may employ the above- described recessive bus fault detection for purposes of building a connectivity map between every possible combination of devices. This map may, in accordance with example implementations, allow the localization of a given recessive bus fault.
[0036] Thus, referring to Fig. 5, in accordance with example implementations, in general, a technique 500 includes communicating (block 502) with bus devices using logical ANDing of signals that are received from redundant buses and attempting (block 504) to communicate with the bus devices using logical ORing of signals received from the redundant buses. Pursuant to block 506, a recessive bus fault is detected based on the communication results. [0037] In accordance with a further example implementation, intermittent faults may be mitigated using a bus interface 600 (replacing the bus interface 140, for example) that is depicted in Fig. 6. In this regard, "intermittent faults" refer to faults that alternate between dominant and recessive states. As an example, a case for intermittent faults may occur for a completely
disconnected/unterminated CAN bus line. To accommodate these
intermittent faults, the bus interface 600 allows three possible modes of reception. In the first mode, an AND gate 614 of the bus interface 600 provides a bus data input signal to the receive input 262 of the processor 1 10, which is an ANDed version of the signals provided by the receive outputs 232 of the bus transceivers 220-1 and 220-2. This mode of reception is for the case in which no faults are present or one of the buses 1 50 experiences a recessive fault. If, however, a dominant fault is detected, then a second or a third mode of reception is used. With the second mode of reception, for this example, the receive output 232 from the bus transceiver 220-1 is used. In the third mode, the receive output 232 from the bus transceiver 220-2 is used.
[0038] In this manner, the bus interface 600 includes OR gates 616 and 61 8 for purposes of solely selecting the receive output 232 from a given bus transceiver 220 for the receive input 262 to the processor 1 10. As depicted in Fig. 6, the OR gate 61 6 includes one input that is coupled to the receive output 232 of the bus transceiver 220-2; and likewise, one input of the OR gate 618 is coupled to the receive output 232 of the transceiver 220-1 .
Another input of the OR gate 616 is coupled to a bus enable output 610 of the processor 1 1 0; and likewise, another input of the OR gate 618 is coupled to a bus enable output 612 of the processor 1 1 0. The output terminals of the OR gates 616 and 618 are provided as inputs to the AND gate 614. The processor 1 1 0 selectively de-asserts (drives to a logic zero, for example) the bus enable output 610 and 61 2 for purposes of selecting one of the receive outputs 232. For example, when the processor 1 10 de-asserts the output 61 0, this selects the receive output 232 of the bus transceiver 220-1 . When the processor 1 10 de-asserts the output 612, this selects the receive output 232 of the bus transceiver 220-2. [0039] The processor 1 10 performs a technique 700 that is depicted in Fig. 7 for purposes of handling intermittent faults, in accordance with example implementations. Pursuant to the technique 700, a first signal is received from the first bus, pursuant to block 704; and a second signal is received from a second bus, pursuant to block 706. If a determination is made (decision block 708) that a fault is detected with the first or second bus, then the signal from the bus not designated as experiencing the fault is received and used, pursuant to block 710. This continues until the fault is resolved or another bus device reports (decision block 712) that a packet has been successfully received over the designated fault bus. Thus, if in decision block 708 a fault is not detected with either the first or second bus or successive packet reception occurs over a previously-designated fault bus, the technique 700 includes logically ANDing the first and second signals from the first and second buses together to derive an input bus data signal for the controller, pursuant to block 714.
[0040] Among the advantages of the systems and techniques that are disclosed herein, recessive and dominant fault tolerance may be incorporated into a system at a relatively low cost; a standard transceiver may be used; recessive and dominant fault tolerance may be provided using a single power domain supply; relatively few microcontroller pins (three, for example) may be used to implement the recessive and dominant fault tolerance; and so forth. Other and different advantages are contemplated, in accordance with the scope of the appended claims.
[0041 ] While a limited number of examples have been disclosed herein, those skilled in the art, having the benefit of this disclosure, will appreciate numerous modifications and variations therefrom. It is intended that the appended claims cover all such modifications and variations.

Claims

What is claimed is: 1 A method comprising:
receiving a first signal from a first bus;
receiving a second signal from a second bus, the first and second buses being used for redundant communications;
combining the first and second signals to generate a combined signal; and interpreting the first and second signals to derive a bus data input signal for a controller, the interpreting comprising selecting the combined signal based at least in part on whether a predetermined bus fault is detected.
2. The method of claim 1 , wherein the combined signal is generated by combining the first and second signals according to a first rule and the interpreting comprises selecting the combined signal or a fourth signal derived by combining the first and second signals according to a second rule different from the first rule.
3. The method of claim 2, wherein:
in the absence of the predetermined bus fault, the first and second buses are each adapted to communicate a recessive logic value and communicate a dominant logic value; and
the predetermined bus fault comprises a dominant bus fault such that when the dominant bus fault occurs with one of the first and second buses, the bus with which the fault occurs communicates dominant logic values independently of a signal being furnished to the bus by a transmitter.
4. The method of claim 3, wherein
combining the first and second signals according to the first rule comprises logically ANDing the first and second signals to generate the combined signal; and combining the first and second signals according to the second rule
comprises logically ORing the first and second signals to generate the fourth signal.
5. The method of claim 4, wherein selectively providing one of the combined and fourth signal comprises providing the fourth signal to the input in the response to detecting the dominant bus fault and otherwise providing the third signal to the input.
6. The method of claim 3, further comprising:
determining whether communication over the first and second buses by a given bus device is impaired due to a recessive fault with one of the first and second buses, the recessive fault causing the bus with which the recessive fault occurs to communicate recessive logic values regardless of signals being furnished to the bus by the given bus device, wherein determining whether the communication by the given bus device is impaired due to the recessive bus fault comprises:
determining whether both the combined and fourth signals may be used to communicate with the given bus device.
7. The method of claim 6, wherein determining whether both the combined and fourth signals may be used to communicate with the given bus device comprises determining whether an identity of the given bus device is received using the combined signal and using the fourth signal.
8. The method of claim 2, wherein
combining the first and second signals according to the first rule comprises logically ANDing the first and second signals to generate the combined signal; and
combining the first and second signals according to the second rule comprises logically ORing the first and second signals to generate the fourth signal.
9. The method of claim 1 , wherein interpreting the first and second signals comprises selecting between the first signal, the second signal and the combined signal to derive the bus data input signal for the controller based at least in part on detection of the predetermined fault.
10. An apparatus comprising:
a fault detector to detect a predetermined fault occurring with a set of redundant buses, wherein the set of redundant buses comprises a first bus and a second bus, the first bus providing a first signal and the second bus providing a second signal;
a bus interface to apply first logic to combine the first and second signals to provide a third signal and apply second logic different from the first logic to combine the first and second signals to provide a fourth signal; and
a processor to communicate with the set of redundant buses, the processor to interpret the third and fourth signals based at least in part on whether the fault detector detects the predetermined fault, wherein the interpretation comprises the processor selecting one of the third and fourth signals as a bus data input signal.
1 1 . The apparatus of claim 10, wherein the bus interface comprises an AND gate to logically AND the first and second signals to generate the third signal and an OR gate to logically OR the first and second signals to generate the fourth signal.
12. The apparatus of claim 10, wherein:
in the absence of the predetermined bus fault, the first and second buses are each adapted to communicate a recessive logic value and communicate a dominant logic value; and
the predetermined bus fault comprises a dominant bus fault such that when the dominant bus fault occurs with one of the first and second buses, the bus with which the fault occurs communicates dominant logic values independently of a signal being furnished to the bus by a transmitter.
13. The apparatus of claim 12, further comprising:
a recessive fault detector to detect a recessive fault, wherein the recessive fault occurs with one of the first and second buses when the bus with which the recessive fault occurs communicates recessive logic values independently of a signal being furnished to the bus by a transmitter.
14. An article comprising a non-transitory computer readable storage medium to store instructions that when executed by a computer cause the computer to:
detect a predetermined fault occurring with a set of redundant buses, wherein the set of redundant buses comprises a first bus and a second bus, the first bus providing a first signal and the second bus providing a second signal; and
interpret the first and second based at least in part on whether the
predetermined fault is detected, the interpretation comprising selecting a logical combination from a plurality of logical combinations to be applied to the first and second signals to derive a bus data input signal.
15. The article of claim 14, the storage medium storing instructions that when executed by the computer cause the computer to detect the predetermined fault by detecting an absence of communication over the first and second buses for a predetermined time interval.
PCT/US2013/062599 2013-09-30 2013-09-30 Interpreting signals received from redundant buses WO2015047386A1 (en)

Priority Applications (5)

Application Number Priority Date Filing Date Title
PCT/US2013/062599 WO2015047386A1 (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses
EP13894301.4A EP3053039A1 (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses
US15/025,565 US10055322B2 (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses
CN201380079938.0A CN105593822A (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses
TW103123966A TW201516657A (en) 2013-09-30 2014-07-11 Interpreting signals received from redundant buses

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/US2013/062599 WO2015047386A1 (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses

Publications (1)

Publication Number Publication Date
WO2015047386A1 true WO2015047386A1 (en) 2015-04-02

Family

ID=52744262

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2013/062599 WO2015047386A1 (en) 2013-09-30 2013-09-30 Interpreting signals received from redundant buses

Country Status (5)

Country Link
US (1) US10055322B2 (en)
EP (1) EP3053039A1 (en)
CN (1) CN105593822A (en)
TW (1) TW201516657A (en)
WO (1) WO2015047386A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220004473A1 (en) * 2020-07-03 2022-01-06 Krohne Messtechnik Gmbh Bus System for a Process System

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3053039A1 (en) * 2013-09-30 2016-08-10 Hewlett Packard Enterprise Development LP Interpreting signals received from redundant buses
EP3593500B1 (en) * 2017-03-08 2023-09-06 Robert Bosch GmbH Method to mitigate voltage based attacks on key agreement over controller area network (can)
DE102017209435A1 (en) * 2017-06-02 2018-12-06 Robert Bosch Gmbh Method for communication between a microcontroller and a transceiver module, microcontroller and transceiver module
CN110531743A (en) * 2019-09-25 2019-12-03 重庆长安汽车股份有限公司 Diagnostic method of the engine management system to bus associated control modules

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6918068B2 (en) * 2002-04-08 2005-07-12 Harris Corporation Fault-tolerant communications system and associated methods
US20060101184A1 (en) * 2004-11-09 2006-05-11 Data Device Corporation Dual speed/dual redundant bus system
US20070061631A1 (en) * 2005-08-29 2007-03-15 Denso Corporation Fault diagnosis in relaying data among a plurality of networks
US20070268973A1 (en) * 2006-05-22 2007-11-22 John Fanson Data communications system and method of data transmission
US20090276666A1 (en) * 2008-04-30 2009-11-05 Egenera, Inc. System, method, and adapter for creating fault-tolerant communication busses from standard components

Family Cites Families (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5422877A (en) * 1993-06-01 1995-06-06 Otis Elevator Company Dual bus switching
KR100197407B1 (en) * 1995-12-28 1999-06-15 유기범 Communication bus architecture between process in the full electronic switching system
US5796964A (en) * 1996-01-16 1998-08-18 International Business Machines Method for modifying an existing computer bus to enhance system performance
WO1998014853A1 (en) * 1996-10-04 1998-04-09 Fisher Controls International, Inc. Process control network with redundant field devices and busses
FR2762695B1 (en) * 1997-04-29 1999-05-28 Bull Sa METHOD AND DEVICE FOR CONNECTING THE CENTRAL UNIT OF A DATA PROCESSING SYSTEM TO A REDUNDANT DATA STORAGE SUBSYSTEM
US6502149B2 (en) * 1997-12-23 2002-12-31 Emc Corporation Plural bus data storage system
US7038433B2 (en) 2003-08-19 2006-05-02 International Rectifier Corporation Active ORing controller for redundant power systems
EP1883193A3 (en) 2006-05-22 2011-06-29 Edgewater Computer Systems, Inc. Data communication system
US20080037989A1 (en) * 2006-08-14 2008-02-14 Paul Douglas Stoner Method And Apparatus For Handling Data And Aircraft Employing Same
US20090106606A1 (en) 2007-10-17 2009-04-23 International Truck Intellectual Property Company, Llc Method and apparatus for detecting and isolating controller area network permanent dominant states
US20100005335A1 (en) 2008-07-01 2010-01-07 International Business Machines Corporation Microprocessor interface with dynamic segment sparing and repair
US9329919B2 (en) 2008-07-16 2016-05-03 Freescale Semiconductor, Inc. Micro controller unit including an error indicator module
US8597054B2 (en) 2011-03-07 2013-12-03 Schneider Electric It Corporation CAN bus automatic line termination
US9276765B2 (en) 2011-10-13 2016-03-01 Texas Instruments Incorporated Apparatus and system for an active star/stub/ring controller area network physical layer transceiver
CN102759891B (en) * 2012-06-07 2014-07-16 中国航天科技集团公司第九研究院第七七一研究所 Hard handover dual-redundancy CAN controller
CN102946082A (en) * 2012-10-23 2013-02-27 南京南瑞继保电气有限公司 Realizing method for redundant communication by using double buses
EP3053039A1 (en) * 2013-09-30 2016-08-10 Hewlett Packard Enterprise Development LP Interpreting signals received from redundant buses

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6918068B2 (en) * 2002-04-08 2005-07-12 Harris Corporation Fault-tolerant communications system and associated methods
US20060101184A1 (en) * 2004-11-09 2006-05-11 Data Device Corporation Dual speed/dual redundant bus system
US20070061631A1 (en) * 2005-08-29 2007-03-15 Denso Corporation Fault diagnosis in relaying data among a plurality of networks
US20070268973A1 (en) * 2006-05-22 2007-11-22 John Fanson Data communications system and method of data transmission
US20090276666A1 (en) * 2008-04-30 2009-11-05 Egenera, Inc. System, method, and adapter for creating fault-tolerant communication busses from standard components

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20220004473A1 (en) * 2020-07-03 2022-01-06 Krohne Messtechnik Gmbh Bus System for a Process System
US11947432B2 (en) * 2020-07-03 2024-04-02 Krohne Messtechnik Gmbh Fail-safe bus system for a process system

Also Published As

Publication number Publication date
EP3053039A1 (en) 2016-08-10
TW201516657A (en) 2015-05-01
US10055322B2 (en) 2018-08-21
US20160217053A1 (en) 2016-07-28
CN105593822A (en) 2016-05-18

Similar Documents

Publication Publication Date Title
US10055322B2 (en) Interpreting signals received from redundant buses
US8898364B2 (en) Method, system, and bus coupler for exchanging data between a higher-level network and a lower-level network
US20150339254A1 (en) Data Transmission Using A Protocol Exception State
US10708081B2 (en) Failure protection method based on ring protection link, device, and system
US8670303B2 (en) Multiple-fault-tolerant ethernet network for industrial control
US10296407B2 (en) Method to detect and to handle failures in the communication in a computer network
US8407339B2 (en) Star network and method for preventing a repeated transmission of a control symbol in such a star network
CN103684835A (en) Link fault reporting method and processing method, and transmission node and primary node
US20140043960A1 (en) Method, tor switch, and system for implementing protection switchover based on trill network
EP2528283B1 (en) Guardian strategy for distributed time-triggered protocols
KR20140020731A (en) Automatic recovery after loss of signal event in a network device
CN109245950B (en) Method for determining link failure position and related device
US10491317B2 (en) Method for operating a network arrangement, network system and network arrangement
US10635518B2 (en) Detecting bus faults
CN105284069A (en) Method for time-synchronization in a communications network with a plurality of network nodes
US20200136912A1 (en) Method, Device, and System for Implementing MUX Machine
JP2016126716A (en) Electronic control device
CN115733729B (en) Communication fault processing method, system and equipment
US7894351B2 (en) Detection of link status in blade systems
US9596139B1 (en) Network system and method for detection and correction of duplex mismatch including duplex mode determination
CN105577484A (en) EAPS failure detection method and system, and EAPS network
US10574514B2 (en) Duplex control device and duplex system
Bertoluzzo et al. Application protocols for safety-critical CAN-networked systems
JP2008022079A (en) Communication network system and notice method of reception diagnostic result
US20090245273A1 (en) Frame transmission device and control method for the same

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 13894301

Country of ref document: EP

Kind code of ref document: A1

REEP Request for entry into the european phase

Ref document number: 2013894301

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2013894301

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 15025565

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE